General
-
Target
ctag.exe.7z
-
Size
65KB
-
Sample
201108-3bvnmr4qk6
-
MD5
7e5394f05ee8e7a847052ac0be230d2b
-
SHA1
bed55a45b35e1fa7b22564b3b8229b8bf44c1bd1
-
SHA256
d1149325c12cb368c4a385e842765ca4dbc72687c5e6ec6148876e5dd85cb4bd
-
SHA512
2ec164d691c3191cf6c0ee3e9adca310b1e0395e1ab4aa0dd43073ce0dd26ad5f5e50be86e6aaa3d4ecd18f8184eb12a6df886191d7ca4c01f776032ad50c1eb
Static task
static1
Behavioral task
behavioral1
Sample
ctag.exe.NoEjecutar.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
ctag.exe.NoEjecutar.exe
Resource
win10v20201028
Malware Config
Extracted
sodinokibi
delchacay.com.ar
eaglemeetstiger.de
stallbyggen.se
songunceliptv.com
rushhourappliances.com
elpa.se
mylolis.com
partnertaxi.sk
paradicepacks.com
kaliber.co.jp
kindersitze-vergleich.de
shiftinspiration.com
bingonearme.org
campus2day.de
htchorst.nl
selfoutlet.com
mirjamholleman.nl
degroenetunnel.com
geoffreymeuli.com
tetinfo.in
testzandbakmetmening.online
sagadc.com
thenewrejuveme.com
edv-live.de
gastsicht.de
mepavex.nl
romeguidedvisit.com
thaysa.com
skiltogprint.no
fensterbau-ziegler.de
arteservicefabbro.com
promalaga.es
creative-waves.co.uk
lichencafe.com
corendonhotels.com
asiluxury.com
dsl-ip.de
rerekatu.com
alysonhoward.com
brandl-blumen.de
glennroberts.co.nz
commonground-stories.com
centromarysalud.com
perbudget.com
dr-pipi.de
analiticapublica.es
fatfreezingmachines.com
haar-spange.com
mbfagency.com
grupocarvalhoerodrigues.com.br
cursoporcelanatoliquido.online
helikoptervluchtnewyork.nl
jerling.de
birnam-wood.com
uimaan.fi
zonamovie21.net
pcp-nc.com
coffreo.biz
ivfminiua.com
simpliza.com
hoteledenpadova.it
ulyssemarketing.com
harveybp.com
farhaani.com
bigler-hrconsulting.ch
biortaggivaldelsa.com
symphonyenvironmental.com
smithmediastrategies.com
leather-factory.co.jp
lescomtesdemean.be
interactcenter.org
sojamindbody.com
aselbermachen.com
evergreen-fishing.com
andersongilmour.co.uk
cerebralforce.net
argos.wityu.fund
artallnightdc.com
mirkoreisser.de
sportsmassoren.com
stemenstilte.nl
trystana.com
body-armour.online
ctrler.cn
trulynolen.co.uk
videomarketing.pro
aminaboutique247.com
monark.com
stormwall.se
peterstrobos.com
instatron.net
marcuswhitten.site
body-guards.it
babcockchurch.org
freie-baugutachterpraxis.de
sloverse.com
webmaster-peloton.com
havecamerawilltravel2017.wordpress.com
antenanavi.com
alhashem.net
exenberger.at
calxplus.eu
effortlesspromo.com
dontpassthepepper.com
patrickfoundation.net
wellplast.se
dekkinngay.com
wurmpower.at
vermoote.de
cirugiauretra.es
101gowrie.com
expandet.dk
work2live.de
oldschoolfun.net
nuzech.com
nancy-informatique.fr
tophumanservicescourses.com
kisplanning.com.au
antiaginghealthbenefits.com
urmasiimariiuniri.ro
nativeformulas.com
cwsitservices.co.uk
rimborsobancario.net
stacyloeb.com
evologic-technologies.com
sipstroysochi.ru
amylendscrestview.com
katketytaanet.fi
manutouchmassage.com
pridoxmaterieel.nl
gasolspecialisten.se
ouryoungminds.wordpress.com
caribdoctor.org
americafirstcommittee.org
piajeppesen.dk
thewellnessmimi.com
urclan.net
latribuessentielle.com
cursosgratuitosnainternet.com
forskolorna.org
dpo-as-a-service.com
tonelektro.nl
modestmanagement.com
tennisclubetten.nl
autofolierung-lu.de
pickanose.com
houseofplus.com
fibrofolliculoma.info
mediaclan.info
drnice.de
karacaoglu.nl
kadesignandbuild.co.uk
pferdebiester.de
satyayoga.de
xoabigail.com
sachnendoc.com
bargningharnosand.se
ikads.org
nataschawessels.com
hannah-fink.de
marietteaernoudts.nl
transportesycementoshidalgo.es
kamahouse.net
muamuadolls.com
makeflowers.ru
dubnew.com
roadwarrior.app
boldcitydowntown.com
officehymy.com
turkcaparbariatrics.com
gantungankunciakrilikbandung.com
brawnmediany.com
slimani.net
bunburyfreightservices.com.au
bestbet.com
mindpackstudios.com
hokagestore.com
cityorchardhtx.com
praxis-management-plus.de
ceid.info.tr
grelot-home.com
ventti.com.ar
d1franchise.com
carriagehousesalonvt.com
qualitaetstag.de
raschlosser.de
elimchan.com
modamilyon.com
whittier5k.com
better.town
mikeramirezcpa.com
fizzl.ru
retroearthstudio.com
innote.fi
lange.host
fairfriends18.de
ymca-cw.org.uk
norpol-yachting.com
groupe-frayssinet.fr
xltyu.com
nhadatcanho247.com
ra-staudte.de
sotsioloogia.ee
penco.ie
vihannesporssi.fi
lachofikschiet.nl
dutchcoder.nl
sobreholanda.com
kaotikkustomz.com
maxadams.london
naswrrg.org
teresianmedia.org
readberserk.com
c-a.co.in
ecopro-kanto.com
ivivo.es
diversiapsicologia.es
compliancesolutionsstrategies.com
newstap.com.ng
bricotienda.com
gemeentehetkompas.nl
presseclub-magdeburg.de
thailandholic.com
adoptioperheet.fi
operaslovakia.sk
abitur-undwieweiter.de
kao.at
visiativ-industry.fr
vannesteconstruct.be
artotelamsterdam.com
vdberg-autoimport.nl
xn--rumung-bua.online
danskretursystem.dk
zso-mannheim.de
triactis.com
myhostcloud.com
dublikator.com
kevinjodea.com
dareckleyministries.com
amerikansktgodis.se
johnsonfamilyfarmblog.wordpress.com
rumahminangberdaya.com
pay4essays.net
rollingrockcolumbia.com
plantag.de
truenyc.co
epwritescom.wordpress.com
nijaplay.com
schmalhorst.de
DupontSellsHomes.com
ceres.org.au
solerluethi-allart.ch
tux-espacios.com
pt-arnold.de
plv.media
international-sound-awards.com
tinyagency.com
jameskibbie.com
boulderwelt-muenchen-west.de
foryourhealth.live
blog.solutionsarchitect.guru
deprobatehelp.com
notmissingout.com
rehabilitationcentersinhouston.net
gasbarre.com
homng.net
servicegsm.net
teknoz.net
itelagen.com
clos-galant.com
milanonotai.it
projetlyonturin.fr
erstatningsadvokaterne.dk
joyeriaorindia.com
lightair.com
huehnerauge-entfernen.de
delawarecorporatelaw.com
global-kids.info
lloydconstruction.com
hardinggroup.com
fannmedias.com
stoeferlehalle.de
nsec.se
aprepol.com
cnoia.org
onlyresultsmarketing.com
berliner-versicherungsvergleich.de
hexcreatives.co
bee4win.com
ruralarcoiris.com
lapinvihreat.fi
montrium.com
maryloutaylor.com
mdk-mediadesign.de
carrybrands.nl
citymax-cr.com
highimpactoutdoors.net
jsfg.com
polychromelabs.com
shiresresidential.com
balticdermatology.lt
idemblogs.com
darrenkeslerministries.com
herbayupro.com
ahouseforlease.com
wien-mitte.co.at
celularity.com
ogdenvision.com
kafu.ch
schoolofpassivewealth.com
dlc.berlin
quizzingbee.com
fayrecreations.com
portoesdofarrobo.com
irinaverwer.com
jeanlouissibomana.com
echtveilig.nl
xn--thucmctc-13a1357egba.com
lecantou-coworking.com
iviaggisonciliegie.it
coastalbridgeadvisors.com
boompinoy.com
pier40forall.org
kojima-shihou.com
koko-nora.dk
bodyforwife.com
carlosja.com
senson.fi
xn--logopdie-leverkusen-kwb.de
lubetkinmediacompanies.com
licor43.de
stoeberstuuv.de
humanityplus.org
blood-sports.net
drinkseed.com
eraorastudio.com
jiloc.com
siluet-decor.ru
goodgirlrecovery.com
pierrehale.com
rafaut.com
sportverein-tambach.de
walkingdeadnj.com
whyinterestingly.ru
pocket-opera.de
thomasvicino.com
psnacademy.in
mountaintoptinyhomes.com
socialonemedia.com
lusak.at
mbxvii.com
ilive.lt
hotelsolbh.com.br
hushavefritid.dk
ccpbroadband.com
actecfoundation.org
liliesandbeauties.org
sauschneider.info
sofavietxinh.com
sterlingessay.com
homecomingstudio.com
renergysolution.com
markelbroch.com
webhostingsrbija.rs
ostheimer.at
aakritpatel.com
chaotrang.com
argenblogs.com.ar
plastidip.com.ar
saka.gr
prochain-voyage.net
trapiantofue.it
synlab.lt
jasonbaileystudio.com
simpkinsedwards.co.uk
spd-ehningen.de
kampotpepper.gives
fitnessingbyjessica.com
danielblum.info
charlottepoudroux-photographie.fr
irishmachineryauctions.com
2ekeus.nl
refluxreducer.com
verbisonline.com
deoudedorpskernnoordwijk.nl
financescorecard.com
figura.team
div-vertriebsforschung.de
unetica.fr
backstreetpub.com
hairnetty.wordpress.com
mardenherefordshire-pc.gov.uk
kojinsaisei.info
12starhd.online
cuppacap.com
kissit.ca
psc.de
mooreslawngarden.com
stopilhan.com
trackyourconstruction.com
tongdaifpthaiphong.net
makeurvoiceheard.com
cite4me.org
kariokids.com
humancondition.com
beautychance.se
notsilentmd.org
qlog.de
skanah.com
harpershologram.wordpress.com
www1.proresult.no
jbbjw.com
bordercollie-nim.nl
tradiematepro.com.au
qualitus.com
fundaciongregal.org
lynsayshepherd.co.uk
xtptrack.com
sla-paris.com
xn--vrftet-pua.biz
aglend.com.au
smhydro.com.pl
autodujos.lt
kalkulator-oszczednosci.pl
strandcampingdoonbeg.com
manifestinglab.com
id-vet.com
advizewealth.com
schlafsack-test.net
hvccfloorcare.com
aunexis.ch
jyzdesign.com
iqbalscientific.com
layrshift.eu
hiddencitysecrets.com.au
lionware.de
intecwi.com
victoriousfestival.co.uk
launchhubl.com
wraithco.com
cyntox.com
lucidinvestbank.com
wacochamber.com
otsu-bon.com
groupe-cets.com
basisschooldezonnewijzer.nl
spargel-kochen.de
zervicethai.co.th
greenpark.ch
ussmontanacommittee.us
mastertechengineering.com
wasmachtmeinfonds.at
associationanalytics.com
stoneys.ch
smogathon.com
bockamp.com
vitavia.lt
bloggyboulga.net
jvanvlietdichter.nl
employeesurveys.com
dr-seleznev.com
thee.network
maineemploymentlawyerblog.com
mariposapropaneaz.com
jobcenterkenya.com
geekwork.pl
embracinghiscall.com
syndikat-asphaltfieber.de
galleryartfair.com
lebellevue.fr
naturavetal.hr
noskierrenteria.com
ausair.com.au
mylovelybluesky.com
suncrestcabinets.ca
admos-gleitlager.de
lapinlviasennus.fi
micro-automation.de
fotoscondron.com
abogados-en-alicante.es
aco-media.nl
streamerzradio1.site
restaurantesszimmer.de
cactusthebrand.com
noixdecocom.fr
cuspdental.com
braffinjurylawfirm.com
southeasternacademyofprosthodontics.org
geisterradler.de
offroadbeasts.com
coding-machine.com
gamesboard.info
igorbarbosa.com
austinlchurch.com
faronics.com
antonmack.de
durganews.com
deko4you.at
bouncingbonanza.com
nosuchthingasgovernment.com
platformier.com
vancouver-print.ca
mousepad-direkt.de
extensionmaison.info
zimmerei-fl.de
freie-gewerkschaften.de
crowcanyon.com
baumkuchenexpo.jp
ecpmedia.vn
ncs-graphic-studio.com
comarenterprises.com
gadgetedges.com
vibethink.net
bhwlawfirm.com
dinslips.se
buroludo.nl
milsing.hr
smejump.co.th
tips.technology
teczowadolina.bytom.pl
eglectonk.online
steampluscarpetandfloors.com
nvwoodwerks.com
navyfederalautooverseas.com
ralister.co.uk
mountsoul.de
polymedia.dk
tampaallen.com
kenhnoithatgo.com
mooglee.com
denovofoodsgroup.com
extraordinaryoutdoors.com
tsklogistik.eu
scenepublique.net
crosspointefellowship.church
kidbucketlist.com.au
hatech.io
nurturingwisdom.com
solhaug.tk
mrtour.site
balticdentists.com
serce.info.pl
ai-spt.jp
memaag.com
worldhealthbasicinfo.com
baylegacy.com
wari.com.pe
naturalrapids.com
nachhilfe-unterricht.com
micahkoleoso.de
cranleighscoutgroup.org
thedad.com
merzi.info
conexa4papers.trade
ino-professional.ru
smokeysstoves.com
sandd.nl
ftf.or.at
takeflat.com
deschl.net
consultaractadenacimiento.com
onlybacklink.com
digivod.de
oceanastudios.com
brigitte-erler.com
edgewoodestates.org
parkcf.nl
norovirus-ratgeber.de
oslomf.no
fransespiegels.nl
courteney-cox.net
team-montage.dk
sairaku.net
sarbatkhalsafoundation.org
lascuola.nl
beyondmarcomdotcom.wordpress.com
hhcourier.com
hashkasolutindo.com
jacquin-maquettes.com
collaborativeclassroom.org
noesis.tech
y-archive.com
greenko.pl
copystar.co.uk
uranus.nl
vietlawconsultancy.com
alfa-stroy72.com
kostenlose-webcams.com
spylista.com
abogadosaccidentetraficosevilla.es
milestoneshows.com
simplyblessedbykeepingitreal.com
bptdmaluku.com
binder-buerotechnik.at
kedak.de
forestlakeuca.org.au
ftlc.es
yamalevents.com
leda-ukraine.com.ua
tecnojobsnet.com
christ-michael.net
chrissieperry.com
chavesdoareeiro.com
vloeren-nu.nl
revezlimage.com
kirkepartner.dk
levihotelspa.fi
centrospgolega.com
malychanieruchomoscipremium.com
allentownpapershow.com
shhealthlaw.com
longislandelderlaw.com
parkstreetauto.net
asteriag.com
abl1.net
vickiegrayimages.com
lorenacarnero.com
x-ray.ca
huissier-creteil.com
campusoutreach.org
surespark.org.uk
ampisolabergeggi.it
zenderthelender.com
zzyjtsgls.com
aniblinova.wordpress.com
eadsmurraypugh.com
daniel-akermann-architektur-und-planung.ch
conasmanagement.de
tulsawaterheaterinstallation.com
bouldercafe-wuppertal.de
ravensnesthomegoods.com
marchand-sloboda.com
i-arslan.de
tinkoff-mobayl.ru
associacioesportivapolitg.cat
paulisdogshop.de
shonacox.com
henricekupper.com
summitmarketingstrategies.com
securityfmm.com
pasivect.co.uk
igfap.com
4net.guru
labobit.it
heidelbergartstudio.gallery
zieglerbrothers.de
tuuliautio.fi
mrsplans.net
atozdistribution.co.uk
ianaswanson.com
littlebird.salon
bierensgebakkramen.nl
schraven.de
8449nohate.org
broseller.com
entopic.com
classycurtainsltd.co.uk
allamatberedare.se
id-et-d.fr
strategicstatements.com
nicoleaeschbachorg.wordpress.com
ki-lowroermond.nl
the-domain-trader.com
ecoledansemulhouse.fr
richard-felix.co.uk
gonzalezfornes.es
krlosdavid.com
edrcreditservices.nl
baptisttabernacle.com
theshungiteexperience.com.au
lillegrandpalais.com
vitalyscenter.es
waveneyrivercentre.co.uk
corelifenutrition.com
ilcdover.com
dw-css.de
tanciu.com
miriamgrimm.de
newyou.at
waywithwords.net
judithjansen.com
love30-chanko.com
nandistribution.nl
kath-kirche-gera.de
bradynursery.com
heurigen-bauer.at
simulatebrain.com
troegs.com
kamienny-dywan24.pl
shsthepapercut.com
pointos.com
sanyue119.com
koken-voor-baby.nl
cimanchesterescorts.co.uk
twohourswithlena.wordpress.com
higadograsoweb.com
live-con-arte.de
happyeasterimages.org
dubscollective.com
microcirc.net
ditog.fr
joseconstela.com
theduke.de
rosavalamedahr.com
almosthomedogrescue.dog
sporthamper.com
behavioralmedicinespecialists.com
michaelsmeriglioracing.com
smale-opticiens.nl
321play.com.hk
kikedeoliveira.com
autopfand24.de
personalenhancementcenter.com
vox-surveys.com
hihaho.com
jobmap.at
socstrp.org
luckypatcher-apkz.com
poultrypartners.nl
iwelt.de
centuryrs.com
pelorus.group
finediningweek.pl
deltacleta.cat
dnepr-beskid.com.ua
run4study.com
bildungsunderlebnis.haus
tstaffing.nl
testcoreprohealthuk.com
oncarrot.com
milltimber.aberdeen.sch.uk
abogadoengijon.es
ausbeverage.com.au
ncuccr.org
chandlerpd.com
slimidealherbal.com
cortec-neuro.com
insp.bi
pubweb.carnet.hr
connectedace.com
beaconhealthsystem.org
podsosnami.ru
kuntokeskusrok.fi
christinarebuffetcourses.com
vetapharma.fr
denifl-consulting.at
funjose.org.gt
jusibe.com
unim.su
villa-marrakesch.de
puertamatic.es
punchbaby.com
ladelirante.fr
limassoldriving.com
drfoyle.com
botanicinnovations.com
verifort-capital.de
profectis.de
foretprivee.ca
iyahayki.nl
kingfamily.construction
dushka.ua
lapmangfpt.info.vn
liikelataamo.fi
iphoneszervizbudapest.hu
aarvorg.com
smartypractice.com
coding-marking.com
berlin-bamboo-bikes.org
finde-deine-marke.de
jorgobe.at
charlesreger.com
accountancywijchen.nl
paymybill.guru
hebkft.hu
mir-na-iznanku.com
augenta.com
sportiomsportfondsen.nl
burkert-ideenreich.de
ontrailsandboulevards.com
edelman.jp
cheminpsy.fr
anybookreader.de
rota-installations.co.uk
appsformacpc.com
no-plans.com
sabel-bf.com
buymedical.biz
leeuwardenstudentcity.nl
yassir.pro
abogadosadomicilio.es
stefanpasch.me
spinheal.ru
apolomarcas.com
bauertree.com
craigvalentineacademy.com
anteniti.com
nestor-swiss.ch
helenekowalsky.com
phantastyk.com
dezatec.es
celeclub.org
chatizel-paysage.fr
euro-trend.pl
saarland-thermen-resort.com
educar.org
agence-chocolat-noir.com
executiveairllc.com
supportsumba.nl
abuelos.com
meusharklinithome.wordpress.com
woodworkersolution.com
asgestion.com
faizanullah.com
minipara.com
liveottelut.com
fax-payday-loans.com
cafemattmeera.com
bogdanpeptine.ro
parebrise-tla.fr
1kbk.com.ua
directwindowco.com
ilso.net
boisehosting.net
wsoil.com.sg
modelmaking.nl
blgr.be
oneheartwarriors.at
latestmodsapks.com
justinvieira.com
123vrachi.ru
slwgs.org
besttechie.com
tomaso.gr
praxis-foerderdiagnostik.de
kunze-immobilien.de
mank.de
philippedebroca.com
nmiec.com
maureenbreezedancetheater.org
tenacitytenfold.com
baronloan.org
roygolden.com
xlarge.at
rocketccw.com
tigsltd.com
veybachcenter.de
themadbotter.com
calabasasdigest.com
hairstylesnow.site
precisionbevel.com
tandartspraktijkheesch.nl
katiekerr.co.uk
mercantedifiori.com
upplandsspar.se
narcert.com
tanzprojekt.com
devok.info
slupetzky.at
yourobgyn.net
samnewbyjax.com
physiofischer.de
tomoiyuma.com
moveonnews.com
pmcimpact.com
walter-lemm.de
myhealth.net.au
thefixhut.com
tanzschule-kieber.de
new.devon.gov.uk
talentwunder.com
ziegler-praezisionsteile.de
insidegarage.pl
upmrkt.co
vyhino-zhulebino-24.ru
mezhdu-delom.ru
mediaplayertest.net
assurancesalextrespaille.fr
zewatchers.com
pinkexcel.com
tandartspraktijkhartjegroningen.nl
tastewilliamsburg.com
torgbodenbollnas.se
wychowanieprzedszkolne.pl
healthyyworkout.com
facettenreich27.de
rieed.de
xn--singlebrsen-vergleich-nec.com
alvinschwartz.wordpress.com
first-2-aid-u.com
parks-nuernberg.de
lmtprovisions.com
mrsfieldskc.com
365questions.org
madinblack.com
waermetauscher-berechnen.de
journeybacktolife.com
triggi.de
familypark40.com
seminoc.com
ledmes.ru
mytechnoway.com
danubecloud.com
toreria.es
corola.es
miraclediet.fun
outcomeisincome.com
the-virtualizer.com
em-gmbh.ch
bimnapratica.com
remcakram.com
sevenadvertising.com
kmbshipping.co.uk
rostoncastings.co.uk
homesdollar.com
dirittosanitario.biz
bayoga.co.uk
architekturbuero-wagner.net
you-bysia.com.au
radaradvies.nl
hmsdanmark.dk
maratonaclubedeportugal.com
deepsouthclothingcompany.com
datacenters-in-europe.com
sahalstore.com
greenfieldoptimaldentalcare.com
theapifactory.com
girlillamarketing.com
frontierweldingllc.com
lenreactiv-shop.ru
controldekk.com
people-biz.com
schutting-info.nl
gporf.fr
daklesa.de
softsproductkey.com
filmstreamingvfcomplet.be
flexicloud.hk
bigasgrup.com
nakupunafoundation.org
aurum-juweliere.de
stampagrafica.es
all-turtles.com
pv-design.de
bargningavesta.se
alten-mebel63.ru
saxtec.com
manijaipur.com
ohidesign.com
lefumetdesdombes.com
airconditioning-waalwijk.nl
1team.es
smart-light.co.uk
bookspeopleplaces.com
garage-lecompte-rouen.fr
insigniapmg.com
spectrmash.ru
mmgdouai.fr
myteamgenius.com
vibehouse.rw
faroairporttransfers.net
systemate.dk
baustb.de
craigmccabe.fun
stemplusacademy.com
digi-talents.com
quemargrasa.net
withahmed.com
naturstein-hotte.de
smalltownideamill.wordpress.com
despedidascostablanca.es
answerstest.ru
completeweddingkansas.com
levdittliv.se
devlaur.com
fiscalsort.com
easytrans.com.au
bouquet-de-roses.com
croftprecision.co.uk
ihr-news.jp
creamery201.com
theadventureedge.com
zflas.com
haremnick.com
rhinosfootballacademy.com
thomas-hospital.de
seitzdruck.com
loprus.pl
krcove-zily.eu
art2gointerieurprojecten.nl
caffeinternet.it
mooshine.com
corona-handles.com
adultgamezone.com
devstyle.org
highlinesouthasc.com
stupbratt.no
dr-tremel-rednitzhembach.de
toponlinecasinosuk.co.uk
westdeptfordbuyrite.com
iwr.nl
winrace.no
ora-it.de
desert-trails.com
catholicmusicfest.com
dutchbrewingcoffee.com
vanswigchemdesign.com
fitovitaforum.com
wolf-glas-und-kunst.de
esope-formation.fr
pcprofessor.com
wmiadmin.com
heliomotion.com
d2marketing.co.uk
blewback.com
pogypneu.sk
lbcframingelectrical.com
allfortheloveofyou.com
izzi360.com
icpcnj.org
julis-lsa.de
neuschelectrical.co.za
xn--fn-kka.no
hypozentrum.com
hkr-reise.de
purposeadvisorsolutions.com
knowledgemuseumbd.com
myzk.site
imperfectstore.com
bafuncs.org
zimmerei-deboer.de
leoben.at
gratispresent.se
atmos-show.com
aodaichandung.com
proudground.org
bbsmobler.se
juneauopioidworkgroup.org
planchaavapor.net
i-trust.dk
sw1m.ru
real-estate-experts.com
ungsvenskarna.se
rozemondcoaching.nl
globedivers.wordpress.com
webcodingstudio.com
parking.netgateway.eu
igrealestate.com
destinationclients.fr
klusbeter.nl
danholzmann.com
vesinhnha.com.vn
n1-headache.com
bridgeloanslenders.com
verytycs.com
werkkring.nl
morawe-krueger.de
candyhouseusa.com
tarotdeseidel.com
fitnessbazaar.com
sanaia.com
lykkeliv.net
theletter.company
agence-referencement-naturel-geneve.net
boosthybrid.com.au
biapi-coaching.fr
bigbaguettes.eu
cleliaekiko.online
autodemontagenijmegen.nl
travelffeine.com
seagatesthreecharters.com
klimt2012.info
camsadviser.com
iyengaryogacharlotte.com
polzine.net
evangelische-pfarrgemeinde-tuniberg.de
crowd-patch.co.uk
makeitcount.at
advokathuset.dk
woodleyacademy.org
pawsuppetlovers.com
rebeccarisher.com
friendsandbrgrs.com
mapawood.com
hellohope.com
yousay.site
bsaship.com
commercialboatbuilding.com
acomprarseguidores.com
sexandfessenjoon.wordpress.com
alsace-first.com
apprendrelaudit.com
zweerscreatives.nl
spacecitysisters.org
c2e-poitiers.com
crediacces.com
ncid.bc.ca
bristolaeroclub.co.uk
vorotauu.ru
theclubms.com
galserwis.pl
imaginado.de
odiclinic.org
gopackapp.com
nacktfalter.de
colorofhorses.com
pasvenska.se
chefdays.de
jolly-events.com
siliconbeach-realestate.com
petnest.ir
gmto.fr
mymoneyforex.com
midmohandyman.com
carolinepenn.com
luxurytv.jp
jenniferandersonwriter.com
logopaedie-blomberg.de
thedresserie.com
anthonystreetrimming.com
seevilla-dr-sturm.at
simoneblum.de
solinegraphic.com
spsshomeworkhelp.com
ateliergamila.com
pivoineetc.fr
plotlinecreative.com
jadwalbolanet.info
seproc.hn
opatrovanie-ako.sk
slashdb.com
osterberg.fi
mrxermon.de
bowengroup.com.au
herbstfeststaefa.ch
blumenhof-wegleitner.at
craftleathermnl.com
hotelzentral.at
eco-southafrica.com
maasreusel.nl
starsarecircular.org
nokesvilledentistry.com
architecturalfiberglass.org
transliminaltribe.wordpress.com
musictreehouse.net
reddysbakery.com
bxdf.info
dramagickcom.wordpress.com
caribbeansunpoker.com
jandaonline.com
fotoideaymedia.es
filmvideoweb.com
psa-sec.de
kosterra.com
ligiercenter-sachsen.de
stingraybeach.com
bundabergeyeclinic.com.au
importardechina.info
pomodori-pizzeria.de
rksbusiness.com
sweering.fr
live-your-life.jp
gw2guilds.org
allure-cosmetics.at
promesapuertorico.com
firstpaymentservices.com
darnallwellbeing.org.uk
imadarchid.com
lukeshepley.wordpress.com
oneplusresource.org
castillobalduz.es
gymnasedumanagement.com
linnankellari.fi
brevitempore.net
pmc-services.de
hugoversichert.de
huesges-gruppe.de
pixelarttees.com
oemands.dk
atalent.fi
resortmtn.com
otto-bollmann.de
jakekozmor.com
schoellhammer.com
comparatif-lave-linge.fr
femxarxa.cat
blossombeyond50.com
marketingsulweb.com
coursio.com
mediaacademy-iraq.org
blacksirius.de
quickyfunds.com
porno-gringo.com
bodyfulls.com
kaminscy.com
35-40konkatsu.net
urist-bogatyr.ru
panelsandwichmadrid.es
gaiam.nl
csgospeltips.se
xn--fnsterputssollentuna-39b.se
web.ion.ag
smessier.com
marathonerpaolo.com
drugdevice.org
space.ua
artige.com
macabaneaupaysflechois.com
enovos.de
4youbeautysalon.com
handi-jack-llc.com
mdacares.com
falcou.fr
todocaracoles.com
blogdecachorros.com
bastutunnan.se
hrabritelefon.hr
waynela.com
sinal.org
olejack.ru
shadebarandgrillorlando.com
-
net
false
-
pid
$2a$10$wDpg/Fw7zznTuiMmZdlb4eJwd0uHLsX0bMw0F.zhvMLOqoJ2vXlsO
-
ransom_oneliner
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
-
ransom_template
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decryptor.cc/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
-
sub
5776
Extracted
C:\7b4nwl7nc-readme.txt
sodinokibi
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/EAAD3E06EF3AB761
http://decryptor.cc/EAAD3E06EF3AB761
Targets
-
-
Target
ctag.exe.NoEjecutar
-
Size
117KB
-
MD5
0d59bd37b0a11f82e47effd55d4d5e98
-
SHA1
ae6a817e758ec92dfae704683c1eb51e66add525
-
SHA256
91888a6beae36b73067be745fa82f620a80518f9c68b735ec8cc8b994733e4f3
-
SHA512
c0524b64508cbc53340d0645962506d49d3e7c567613c2603d3e3b36ffbd70d87f7048c0313ea569717b8e04e2cf4fd7c8e6323fd8492a54885ab9c7ed27566c
Score10/10-
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies service
-
Sets desktop wallpaper using registry
-